battle[.]tel

Analysis of the domain battle.tel shows that it was registered on June 25 2026 through Key-Systems GmbH. The domain resolves to the IPv4 address 5.253.61.77, which is hosted on a set of Russian‑origin nameservers (ns1.adminvps.ru, ns2.adminvps.net, ns3.adminvps.ru, ns4.adminvps.net). The same hosting infrastructure appears on a single public blocklist and has been actively blocked by the PhishDestroy feed, indicating prior identification as malicious. VirusTotal records demonstrate that the domain has been examined by 91 scanning engines, none of which raised a detection at the time of analysis; the absence of a detection does not constitute a safety assurance. The domain is currently listed as active, and no additional metadata such as SSL certificate details, HTTP response codes, or page titles have been disclosed publicly. Consequently, the primary evidence supporting a phishing assessment consists of the recent registration date, the use of high‑turnover VPS nameservers, inclusion on a known blocklist, and the designation by PhishDestroy as a phishing‑related entry. Uncertainty remains regarding the actual content hosted on the site, the specific brand or credential targets, and any active payloads. Defenders should block network traffic to 5.253.61.77 and to the domain battle.tel at the DNS level, monitor for any outbound connections from internal users to the listed nameservers, and incorporate the domain into existing phishing‑mitigation feeds. Continuous re‑scanning on VirusTotal or a similar multi‑engine platform is recommended to capture any future changes in detection status.